Cyberstudy
PDF p.217 In progress

Vulnerability Types

Open PDF at p.217 18 flashcards

Summary

PDF p.217

Vulnerability types include issues with legacy and end-of-life (EOL) systems, firmware vulnerabilities, and virtualization vulnerabilities. These vulnerabilities can pose significant security challenges due to outdated systems, foundational software flaws, and the complexities of virtual environments.

In plain words

Supplementary — not from your PDF

Some vulnerability types come from what's underneath. End-of-life (EOL) systems no longer get patches; legacy systems are old but may still be supported. Firmware flaws (Meltdown/Spectre in CPUs, LoJax in UEFI) sit below the OS and can survive reinstalls. Virtualization flaws include VM escape (breaking out of a guest to the host) and resource reuse (data leaking between VMs). Mitigations: sanitize, encrypt, manage keys, and patch hypervisors.

Detailed explanation

PDF p.217
  • Legacy and End-of-Life (EOL) Systems
    • Definition: Outdated systems that may no longer receive updates or support.
    • EOL Systems: No longer supported by the manufacturer, making them vulnerable to new threats.
    • Legacy Systems: Outdated but may still be supported; often used due to reliability and integration into critical functions.
    • Examples: Windows 7 and Server 2008, which stopped receiving updates in January 2020.
    • Risks: Lack of updates, lack of support, compatibility issues with newer systems.
  • Firmware Vulnerabilities
    • Definition: Foundational software controlling hardware, which can contain significant vulnerabilities.
    • Examples
      • Meltdown and Spectre (2018): Impacted almost all computers and mobile devices, allowing data theft during processing.
      • LoJax (2018): UEFI firmware vulnerability allowing persistence even after hard drive replacement or OS reinstallation.
    • Risks: EOL hardware vulnerabilities arise when manufacturers stop providing updates, parts, or patches.
  • Virtualization Vulnerabilities
    • Definition: Vulnerabilities unique to virtual environments, impacting cost savings, scalability, and efficiency.
    • Examples
      • VM Escape: Attacker breaks out of a virtual machine to access the host system or other VMs.
      • Cloudburst (CVE-2009-1244): VMware ESX Server vulnerability allowing guest OS to execute code on the host OS.
      • Resource Reuse: Sensitive data leakage between VMs if resources are not properly sanitized.
    • Mitigation: Data sanitization, encryption, robust key management, training on security features, and regular patching of hypervisors.

Important terms

taken from the text above
Legacy and End-of-Life (EOL) Systems
Outdated systems that may no longer receive updates or support.
EOL Systems
No longer supported by the manufacturer, making them vulnerable to new threats.
Legacy Systems
Outdated but may still be supported; often used due to reliability and integration into critical functions.
Firmware Vulnerabilities
Foundational software controlling hardware, which can contain significant vulnerabilities.
Meltdown and Spectre (2018)
Impacted almost all computers and mobile devices, allowing data theft during processing.
LoJax (2018)
UEFI firmware vulnerability allowing persistence even after hard drive replacement or OS reinstallation.
Virtualization Vulnerabilities
Vulnerabilities unique to virtual environments, impacting cost savings, scalability, and efficiency.
VM Escape
Attacker breaks out of a virtual machine to access the host system or other VMs.
Cloudburst (CVE-2009-1244)
VMware ESX Server vulnerability allowing guest OS to execute code on the host OS.
Resource Reuse
Sensitive data leakage between VMs if resources are not properly sanitized.
EOL End-of-Life

Examples & real-world scenarios

Supplementary — not from your PDF
  • Windows 7 and Server 2008 stopped getting updates in January 2020.
  • UEFI malware surviving an OS reinstall.
  • A hypervisor patch fixing a VM escape bug.

Scenario

A factory depends on an EOL Windows PC to run a machine. It can't be patched, so it should be isolated on its own segment with strict access and monitoring until it can be replaced.

Common mistakes

Supplementary — not from your PDF
  • Assuming reinstalling the OS removes firmware-level compromise.
  • Forgetting that hypervisors need patching too.

Practical skills

Supplementary — not from your PDF
  • List compensating controls for an EOL system you can't retire yet.

What I should remember

Key Points PDF p.217
  • Legacy and End-of-Life (EOL) Systems
    • Outdated Systems: Lack of updates and support.
    • EOL Examples: Windows 7, Server 2008.
    • Risks: Vulnerable to new threats, compatibility issues.
  • Firmware Vulnerabilities
    • Foundational Software: Controls hardware.
    • Significant Examples: Meltdown, Spectre, LoJax.
    • Risks: Persistent vulnerabilities, data theft.
  • Virtualization Vulnerabilities
    • Unique to Virtual Environments: VM escape, resource reuse.
    • Significant Examples: Cloudburst, VM escape.
    • Mitigation: Data sanitization, encryption, regular patching.